CVE-2022-34212

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:vrealize_orchestrator:*:*:*:*:*:jenkins:*:*

Information

Published : 2022-06-23 10:15

Updated : 2022-06-29 15:23


NVD link : CVE-2022-34212

Mitre link : CVE-2022-34212


JSON object : View

CWE
CWE-862

Missing Authorization

Products Affected

jenkins

  • vrealize_orchestrator